CVE-2009-2689
10.08.2009, 18:30
JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted (1) applet or (2) application.Enginsight
| Vendor | Product | Version |
|---|---|---|
| sun | java_se | 𝑥 ≤ 5.0 |
| sun | java_se | 𝑥 ≤ 6 |
| sun | openjdk | * |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| openjdk-6 |
| ||||||||||||||||
| sun-java5 |
| ||||||||||||||||
| sun-java6 |
|
Common Weakness Enumeration
References